This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft File: D0OG59TvxHLBH-nP7z0zCXSzP2E.mft (raw, json) Hash identifier: 8oE9Emi7fSUfxmuKHjmh8gFJym12MTNo+A7q63YwNaU= Subject key identifier: 95:95:50:49:B6:6B:BE:AF:FE:0A:9E:F2:2E:1B:4E:20:44:99:8F:D5 Authority key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61 Certificate issuer: /CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61 Certificate serial: 019B5975B6A6573653D89EEEB8C2FF26C5AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft Manifest number: 0A38 Signing time: Fri 26 Dec 2025 07:00:45 +0000 Manifest this update: Fri 26 Dec 2025 07:00:45 +0000 Manifest next update: Sat 27 Dec 2025 07:00:45 +0000 Files and hashes: 1: D0OG59TvxHLBH-nP7z0zCXSzP2E.crl (hash: +b94rp8YbQXSUla2zTQ/G7f5hxAWMIFlNm1gCHyfk+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:b6:a6:57:36:53:d8:9e:ee:b8:c2:ff:26:c5:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61 Validity Not Before: Dec 26 07:00:45 2025 GMT Not After : Dec 27 07:00:45 2025 GMT Subject: CN=95955049b66bbeaffe0a9ef22e1b4e2044998fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5c:0b:ce:00:fd:77:6e:09:70:cf:5f:5d:92: 54:00:b3:90:be:97:03:33:7f:c7:9c:da:28:ed:f0: 9c:6b:21:b9:df:31:c1:5c:1e:45:36:18:99:be:49: 4a:b3:6d:77:8b:ed:12:da:73:d7:fd:b7:28:ca:0c: cc:a6:fb:e4:1b:1a:51:71:d9:0e:52:cd:8e:2b:f6: 25:65:3e:bb:ae:6c:9d:9e:0f:d9:4e:a3:e1:74:53: 4e:d3:38:7a:e3:08:5d:95:0f:12:8b:fe:1d:7d:df: e4:a3:22:21:90:fa:8e:d7:43:b3:c2:f9:d0:2a:f4: 2f:b1:34:7d:0b:ea:d4:e3:eb:e3:89:37:0f:38:40: 82:17:25:2e:a0:2e:e1:b3:b8:7e:ac:5d:e8:78:e0: 76:b9:fd:3c:0f:18:bb:ae:1c:f6:fd:c5:d2:94:c8: ca:a5:bb:75:26:ec:39:ec:81:eb:9c:42:75:2d:fa: 6c:08:d2:6d:2f:f1:1d:2d:4a:62:fc:05:5f:78:ee: 61:ac:89:59:e3:3e:aa:19:de:5d:c2:5b:7a:a1:67: 95:b3:40:45:2e:43:1d:76:c3:16:b6:f9:5c:f4:3e: 4c:68:46:7b:c1:9f:cb:02:55:12:df:be:5d:1d:0f: b0:6d:8f:60:8c:14:ca:af:da:5c:d6:97:af:ea:52: 20:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:95:50:49:B6:6B:BE:AF:FE:0A:9E:F2:2E:1B:4E:20:44:99:8F:D5 X509v3 Authority Key Identifier: keyid:0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:38:ba:26:85:6c:dc:bf:87:2e:93:e0:7e:b7:46:81:3b:8b: a8:5a:eb:d3:6b:7f:de:8d:5b:18:51:43:9b:2b:00:fd:55:da: bb:79:95:7f:b3:62:be:4d:32:fa:7c:fb:ff:ba:59:6d:e5:4b: e4:98:a7:2d:df:dd:bb:88:ad:bb:a3:b8:c8:47:72:47:02:af: 2f:98:9a:b9:7e:0d:c9:bc:a2:74:dd:df:22:b7:b6:75:b4:1f: 8d:b7:1e:2f:c5:95:cb:b9:f5:47:3b:68:2c:72:86:5d:fa:8f: d2:70:a7:9a:80:f5:5d:a3:d0:e1:82:9c:62:97:11:82:34:c8: 77:48:b0:22:21:12:86:21:31:9a:93:17:af:64:69:b3:cc:6a: eb:2c:7a:c6:d8:3b:f5:4a:1b:83:a4:13:41:3b:92:ff:e1:b3: a8:4d:eb:ff:f7:f0:6f:ea:ca:55:47:9f:58:f9:a9:c6:38:29: 78:36:41:f8:6b:63:59:2d:7a:30:35:50:b0:d2:5a:c7:86:9f: f7:82:3b:76:c9:57:cc:d5:a7:3f:0c:de:c5:93:c1:84:50:00: c3:17:45:e0:fe:22:42:80:91:4f:31:bc:f2:1f:57:d6:e6:62: 88:de:7c:33:5e:49:f6:64:bc:00:ab:24:5f:e7:9b:16:e0:46: 0e:9b:11:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdbamVzZT2J7uuML/JsWqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNDM4NmU3ZDRlZmM0NzJjMTFmZTljZmVmM2QzMzA5NzRi MzNmNjEwHhcNMjUxMjI2MDcwMDQ1WhcNMjUxMjI3MDcwMDQ1WjAzMTEwLwYDVQQD Eyg5NTk1NTA0OWI2NmJiZWFmZmUwYTllZjIyZTFiNGUyMDQ0OTk4ZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51wLzgD9d24JcM9fXZJUALOQvpcD M3/HnNoo7fCcayG53zHBXB5FNhiZvklKs213i+0S2nPX/bcoygzMpvvkGxpRcdkO Us2OK/YlZT67rmydng/ZTqPhdFNO0zh64whdlQ8Si/4dfd/koyIhkPqO10OzwvnQ KvQvsTR9C+rU4+vjiTcPOECCFyUuoC7hs7h+rF3oeOB2uf08Dxi7rhz2/cXSlMjK pbt1Juw57IHrnEJ1LfpsCNJtL/EdLUpi/AVfeO5hrIlZ4z6qGd5dwlt6oWeVs0BF LkMddsMWtvlc9D5MaEZ7wZ/LAlUS375dHQ+wbY9gjBTKr9pc1pev6lIgCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWVUEm2a76v/gqe8i4bTiBEmY/VMB8GA1UdIwQY MBaAFA9DhufU78RywR/pz+89Mwl0sz9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDBPRzU5VHZ4SExCSC1uUDd6MHpDWFN6UDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81NmJmYjQtYjNmZS00NjVhLWIzNTct NTJhYmI1M2I3NTEzLzEvRDBPRzU5VHZ4SExCSC1uUDd6MHpDWFN6UDJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS81NmJmYjQtYjNmZS00NjVhLWIzNTctNTJhYmI1M2I3NTEz LzEvRDBPRzU5VHZ4SExCSC1uUDd6MHpDWFN6UDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALji6JoVs 3L+HLpPgfrdGgTuLqFrr02t/3o1bGFFDmysA/VXau3mVf7Nivk0y+nz7/7pZbeVL 5JinLd/du4itu6O4yEdyRwKvL5iauX4NybyidN3fIre2dbQfjbceL8WVy7n1Rzto LHKGXfqP0nCnmoD1XaPQ4YKcYpcRgjTId0iwIiEShiExmpMXr2Rps8xq6yx6xtg7 9Uobg6QTQTuS/+GzqE3r//fwb+rKVUefWPmpxjgpeDZB+GtjWS16MDVQsNJax4af 94I7dslXzNWnPwzexZPBhFAAwxdF4P4iQoCRTzG88h9X1uZiiN58M15J9mS8AKsk X+ebFuBGDpsRGQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:19 2025 by rpki-client